Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233322e302f32322d3232203d3e20323730323838.roa
File:                     3230302e3132332e3233322e302f32322d3232203d3e20323730323838.roa (raw, json)
Hash identifier:          sWz/hiaELKmw7W6OhtM0ZVob61BxQIl5Kpcjpaf+bhg=
Subject key identifier:   81:3D:CE:38:95:77:09:19:54:A8:3A:F8:D6:7A:C1:C7:AB:A4:1E:9A
Certificate issuer:       /CN=2FEB984B03AE182A25501462242A224C191703BF
Certificate serial:       2C91F73E2802C5FC0801D37558621DBF6CDF613D
Authority key identifier: 2F:EB:98:4B:03:AE:18:2A:25:50:14:62:24:2A:22:4C:19:17:03:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FEB984B03AE182A25501462242A224C191703BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233322e302f32322d3232203d3e20323730323838.roa
Signing time:             Wed 27 Nov 2024 21:10:50 +0000
ROA not before:           Wed 27 Nov 2024 21:05:50 +0000
ROA not after:            Wed 26 Nov 2025 21:10:50 +0000
asID:                     270288
IP address blocks:        200.123.232.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:91:f7:3e:28:02:c5:fc:08:01:d3:75:58:62:1d:bf:6c:df:61:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FEB984B03AE182A25501462242A224C191703BF
        Validity
            Not Before: Nov 27 21:05:50 2024 GMT
            Not After : Nov 26 21:10:50 2025 GMT
        Subject: CN=813DCE389577091954A83AF8D67AC1C7ABA41E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:33:8f:58:6d:ce:41:c6:c1:12:76:5a:be:
                    f5:6c:d8:16:71:68:40:5a:fb:84:e4:f3:d3:ef:0d:
                    f3:ae:79:44:1e:16:4e:0a:94:4e:3f:07:b9:ea:31:
                    bf:e8:a9:ef:d7:0f:71:9f:5d:60:5c:16:f0:01:15:
                    70:0a:58:ed:d8:26:a2:de:99:ff:bd:be:19:9f:9f:
                    64:24:a3:39:24:fe:8d:5a:16:eb:2d:c6:8d:4b:72:
                    7e:e3:a0:2f:be:d0:af:8b:94:40:0a:a8:fa:6e:d2:
                    c8:11:d4:54:79:ab:54:60:e6:27:f9:41:89:e3:d8:
                    2e:eb:c8:f3:ba:91:09:d0:5b:39:5b:4e:31:51:cf:
                    e7:ad:40:ef:58:4a:83:19:44:c5:8f:48:e6:3c:8e:
                    a3:bb:23:a6:d9:ed:c9:a1:75:63:2a:83:5b:61:0e:
                    8c:3d:fd:30:86:d6:01:18:72:01:a7:ce:ff:db:89:
                    27:f5:f6:be:d0:51:05:19:7e:be:8e:52:b1:fe:5d:
                    4a:cb:49:f6:bc:27:42:c1:9e:0f:e4:0a:90:b9:23:
                    49:11:bc:f9:8f:02:ab:65:64:bd:f3:b1:22:e3:f9:
                    39:02:fd:7e:e0:b1:93:5a:a4:81:2c:e6:ec:18:df:
                    4e:5c:4b:51:65:c6:7a:2a:29:2a:e3:b7:4c:83:5c:
                    60:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3D:CE:38:95:77:09:19:54:A8:3A:F8:D6:7A:C1:C7:AB:A4:1E:9A
            X509v3 Authority Key Identifier:
                keyid:2F:EB:98:4B:03:AE:18:2A:25:50:14:62:24:2A:22:4C:19:17:03:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/2FEB984B03AE182A25501462242A224C191703BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FEB984B03AE182A25501462242A224C191703BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233322e302f32322d3232203d3e20323730323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:b5:62:c2:e4:a4:21:3a:fa:ec:1d:45:86:43:eb:57:5a:2c:
         0e:f4:f6:92:4b:fe:72:a1:22:f4:f3:4a:a0:34:5e:cd:6f:b7:
         46:a7:60:be:8c:07:bd:34:2e:56:c2:f8:f2:54:ad:02:c2:f1:
         89:83:25:9f:21:1a:04:92:bb:c5:0c:3e:aa:21:f2:81:7b:12:
         52:df:50:a2:9a:89:00:9f:8e:c9:34:a1:4f:54:50:f0:33:09:
         87:39:e4:73:b6:6a:5a:4c:21:d1:89:b4:e0:cc:5e:26:62:a1:
         a9:25:1e:86:c2:99:84:9c:0e:d4:5e:45:e5:91:bf:e6:23:77:
         3f:56:a8:fd:dd:c0:aa:ba:43:2c:67:55:cc:a5:73:1d:21:4e:
         36:0e:d6:dc:2d:75:ec:d3:10:90:74:11:90:bd:3c:0f:8b:bd:
         b4:52:73:6f:d0:47:37:03:d4:3d:fa:5f:d8:c3:7b:f5:9f:d4:
         dd:a6:f3:08:ff:4b:bb:a4:06:06:27:18:e2:6b:84:d2:1d:85:
         49:d6:79:eb:c9:39:70:12:db:77:ed:19:81:2a:62:e9:b8:50:
         30:42:a5:f6:24:cb:ad:57:84:a6:ab:df:20:6a:df:e2:b7:f3:
         3c:e3:f6:0d:8f:d9:fc:17:15:e4:5f:cb:dc:78:50:46:90:26:
         79:a5:03:da
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULJH3PigCxfwIAdN1WGIdv2zfYT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZFQjk4NEIwM0FFMTgyQTI1NTAxNDYyMjQyQTIyNEMx
OTE3MDNCRjAeFw0yNDExMjcyMTA1NTBaFw0yNTExMjYyMTEwNTBaMDMxMTAvBgNV
BAMTKDgxM0RDRTM4OTU3NzA5MTk1NEE4M0FGOEQ2N0FDMUM3QUJBNDFFOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSFzOPWG3OQcbBEnZavvVs2BZx
aEBa+4Tk89PvDfOueUQeFk4KlE4/B7nqMb/oqe/XD3GfXWBcFvABFXAKWO3YJqLe
mf+9vhmfn2Qkozkk/o1aFustxo1Lcn7joC++0K+LlEAKqPpu0sgR1FR5q1Rg5if5
QYnj2C7ryPO6kQnQWzlbTjFRz+etQO9YSoMZRMWPSOY8jqO7I6bZ7cmhdWMqg1th
Dow9/TCG1gEYcgGnzv/biSf19r7QUQUZfr6OUrH+XUrLSfa8J0LBng/kCpC5I0kR
vPmPAqtlZL3zsSLj+TkC/X7gsZNapIEs5uwY305cS1FlxnoqKSrjt0yDXGCpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUgT3OOJV3CRlUqDr41nrBx6ukHpowHwYDVR0j
BBgwFoAUL+uYSwOuGColUBRiJCoiTBkXA78wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3lCbm1xY3pTc1JRaVJUejg3QWZVU0ZDUHhBcEpoczVNOUVyY1NDc011
SjEvMC8yRkVCOTg0QjAzQUUxODJBMjU1MDE0NjIyNDJBMjI0QzE5MTcwM0JGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGRUI5ODRCMDNBRTE4MkEy
NTUwMTQ2MjI0MkEyMjRDMTkxNzAzQkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d5Qm5tcWN6U3NSUWlSVHo4N0FmVVNGQ1B4QXBKaHM1TTlFcmNTQ3NNdUoxLzAv
MzIzMDMwMmUzMTMyMzMyZTMyMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMDMyMzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsh76DANBgkqhkiG9w0BAQsFAAOCAQEASLVi
wuSkITr67B1FhkPrV1osDvT2kkv+cqEi9PNKoDRezW+3RqdgvowHvTQuVsL48lSt
AsLxiYMlnyEaBJK7xQw+qiHygXsSUt9QopqJAJ+OyTShT1RQ8DMJhznkc7ZqWkwh
0Ym04MxeJmKhqSUehsKZhJwO1F5F5ZG/5iN3P1ao/d3AqrpDLGdVzKVzHSFONg7W
3C117NMQkHQRkL08D4u9tFJzb9BHNwPUPfpf2MN79Z/U3abzCP9Lu6QGBicY4muE
0h2FSdZ568k5cBLbd+0ZgSpi6bhQMEKl9iTLrVeEpqvfIGrf4rfzPOP2DY/Z/BcV
5F/L3HhQRpAmeaUD2g==
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:01:10 2025 by rpki-client